All processes killed ========== OTL ========== C:\Documents and Settings\All Users\Dane aplikacji\qdxsmjapaofznoj moved successfully. C:\Documents and Settings\All Users\Dane aplikacji\tvrndacccdgeohx folder moved successfully. Starting removal of ActiveX control {68282C51-9459-467B-95BF-3C0E89627E55} C:\WINDOWS\Downloaded Program Files\SkanerOnline.inf moved successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{68282C51-9459-467B-95BF-3C0E89627E55}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{68282C51-9459-467B-95BF-3C0E89627E55}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{68282C51-9459-467B-95BF-3C0E89627E55}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{68282C51-9459-467B-95BF-3C0E89627E55}\ not found. C:\Documents and Settings\aneta\Menu Start\Programy\Autostart\OpenOffice.org 2.4.lnk moved successfully. Starting removal of ActiveX control {8AD9C840-044E-11D1-B3E9-00805F499D93} Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully. Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found. Starting removal of ActiveX control {CAFEEFAC-0017-0000-0025-ABCDEFFEDCBA} Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBA}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBA}\ deleted successfully. Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBA}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBA}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBA}\ not found. Starting removal of ActiveX control {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully. Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found. Service k750obex stopped successfully! Service k750obex deleted successfully! File system32\DRIVERS\k750obex.sys not found. Service k750mgmt stopped successfully! Service k750mgmt deleted successfully! File system32\DRIVERS\k750mgmt.sys not found. Service k750mdm stopped successfully! Service k750mdm deleted successfully! File system32\DRIVERS\k750mdm.sys not found. Service k750mdfl stopped successfully! Service k750mdfl deleted successfully! File system32\DRIVERS\k750mdfl.sys not found. Service k750bus stopped successfully! Service k750bus deleted successfully! File system32\DRIVERS\k750bus.sys not found. Service SSPORT stopped successfully! Service SSPORT deleted successfully! File C:\WINDOWS\system32\Drivers\SSPORT.sys not found. ========== REGISTRY ========== Registry key HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes not found. Registry key HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes not found. Registry value HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope deleted successfully. Registry value HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: Administrator ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes ->Flash cache emptied: 492 bytes User: All Users User: aneta ->Temp folder emptied: 30529955 bytes ->Temporary Internet Files folder emptied: 279274982 bytes ->Java cache emptied: 133800157 bytes ->FireFox cache emptied: 312959341 bytes ->Google Chrome cache emptied: 18393202 bytes ->Flash cache emptied: 339061 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 67 bytes ->Flash cache emptied: 41 bytes User: LocalService ->Temp folder emptied: 66016 bytes ->Temporary Internet Files folder emptied: 33233 bytes User: NetworkService ->Temp folder emptied: 56448 bytes ->Temporary Internet Files folder emptied: 33170 bytes ->Flash cache emptied: 492 bytes User: Rafał ->Temp folder emptied: 95240100 bytes ->Temporary Internet Files folder emptied: 18814741 bytes ->FireFox cache emptied: 12926020 bytes ->Flash cache emptied: 523 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 2596 bytes %systemroot%\System32\dllcache .tmp files removed: 32166504 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 3621398 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 895,00 mb OTL by OldTimer - Version 3.2.69.0 log created on 12032013_095340 Files\Folders moved on Reboot... File\Folder C:\Documents and Settings\NetworkService\Ustawienia lokalne\Temp\Perflib_Perfdata_168.dat not found! C:\Documents and Settings\Rafał\Ustawienia lokalne\Temp\JavaDeployReg.log moved successfully. C:\Documents and Settings\Rafał\Ustawienia lokalne\Temporary Internet Files\Content.IE5\RND0KOEO\fastbutton[1].htm moved successfully. C:\Documents and Settings\Rafał\Ustawienia lokalne\Temporary Internet Files\Content.IE5\RND0KOEO\like[1].htm moved successfully. C:\Documents and Settings\Rafał\Ustawienia lokalne\Temporary Internet Files\Content.IE5\RND0KOEO\postmessageRelay[1].htm moved successfully. C:\Documents and Settings\Rafał\Ustawienia lokalne\Temporary Internet Files\Content.IE5\PTG71OS7\xd_arbiter[1].htm moved successfully. C:\Documents and Settings\Rafał\Ustawienia lokalne\Temporary Internet Files\Content.IE5\3BWT254J\20633-zamulony-komputer[1].txt moved successfully. C:\Documents and Settings\Rafał\Ustawienia lokalne\Temporary Internet Files\Content.IE5\3BWT254J\xd_arbiter[1].htm moved successfully. C:\Documents and Settings\Rafał\Ustawienia lokalne\Temporary Internet Files\AntiPhishing\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat moved successfully. PendingFileRenameOperations files... Registry entries deleted on Reboot...